Update mocha requirement to ^5.0.4

[dependabot-preview]

Updates the requirements on mocha to permit the latest version.

Release notes

Sourced from mocha's releases.

v5.0.4

5.0.4 / 2018-03-07

🐛 Fixes

• #3265: Fixes regression in "watch" functionality introduced in v5.0.2 ([outsideris])

[outsideris]: https://github.com/outsideris

Changelog

Sourced from mocha's changelog.

5.0.4 / 2018-03-07

🐛 Fixes

• #3265: Fixes regression in "watch" functionality introduced in v5.0.2 ([outsideris])

5.0.3 / 2018-03-06

This patch features a fix to address a potential "low severity" ReDoS vulnerability in the diff package (a dependency of Mocha).

🔒 Security Fixes

• #3266: Bump diff to v3.5.0 ([anishkny])

🔩 Other

• #3011: Expose generateDiff() in Base reporter ([harrysarson])

[anishkny]: https://github.com/anishkny
[harrysarson]: https://github.com/harrysarson

5.0.2 / 2018-03-05

This release fixes a class of tests which report as false positives. Certain tests will now break, though they would have previously been reported as passing. Details below. Sorry for the inconvenience!

🐛 Fixes

• [#3226]: Do not swallow errors that are thrown asynchronously from passing tests ([boneskull]). Example:

  it('should actually fail, sorry!', function (done) {
    // passing assertion
    assert(true === true);
  
    // test complete & is marked as passing
    done();
  
    // ...but something evil lurks within
    setTimeout(() => {
      throw new Error('chaos!');
    }, 100);
  });

  Previously to this version, Mocha would have silently swallowed the chaos! exception, and you wouldn't know. Well, now you know. Mocha cannot recover from this gracefully, so it will exit with a nonzero code.
  ... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

If you'd like to skip this version, you can just close this PR. If you have any feedback just mention @dependabot in the comments below.

[dependabot-preview]

Superseded by #16.